{"id":"CVE-2018-9390","aliases":["EUVD-2018-20984","GHSA-664m-m8f4-chcx"],"status":"published","title":"In procfile_write of gl_proc.c, there is a possible out of  bounds read of a\n    function pointer...","description":"In procfile_write of gl_proc.c, there is a possible out of  bounds read of a\n    function pointer due to an incorrect bounds check. This could lead to local\n    escalation of privilege with System execution privileges needed. User\n    interaction is not needed for exploitation.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00088,"percentile":0.00353,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2024-12-05T22:23:33Z","modified":"2026-06-17T02:06:33Z","products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/pixel/2018-06-01","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9390"},{"url":"https://github.com/advisories/GHSA-664m-m8f4-chcx"}],"sources":{"cve":[{"id":"CVE-2018-9390","description":"In procfile_write of gl_proc.c, there is a possible out of  bounds read of a\n    function pointer due to an incorrect bounds check. This could lead to local\n    escalation of privilege with System execution privileges needed. User\n    interaction is not needed for exploitation.","status":"published","published":"2024-12-05T22:23:33.742Z","modified":"2024-12-06T16:34:19.189Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:35:02.603326Z"}],"euvd":[{"id":"EUVD-2018-20984","description":"In procfile_write of gl_proc.c, there is a possible out of  bounds read of a\n    function pointer due to an incorrect bounds check. This could lead to local\n    escalation of privilege with System execution privileges needed. User\n    interaction is not needed for exploitation.","status":"published","published":"2024-12-05T22:23:33Z","modified":"2024-12-06T16:34:19Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:04:39.149757Z"}],"ghsa":[{"id":"GHSA-664m-m8f4-chcx","title":"In procfile_write of gl_proc.c, there is a possible out of  bounds read of a\n    function pointer...","description":"In procfile_write of gl_proc.c, there is a possible out of  bounds read of a\n    function pointer due to an incorrect bounds check. This could lead to local\n    escalation of privilege with System execution privileges needed. User\n    interaction is not needed for exploitation.","status":"published","published":"2024-12-06T00:31:47Z","modified":"2024-12-06T18:31:53Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:59:04.219575Z"}],"nvd":[{"id":"CVE-2018-9390","description":"In procfile_write of gl_proc.c, there is a possible out of  bounds read of a\n    function pointer due to an incorrect bounds check. This could lead to local\n    escalation of privilege with System execution privileges needed. User\n    interaction is not needed for exploitation.","status":"published","published":"2024-12-05T23:15:04.793Z","modified":"2026-06-17T02:06:33.05Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:05:00.914771Z"}]}}